How can we make freeradius logs logout actions?
freeRADIUS version is 1.0.4, and we use IEEE802.1X to authenticate users This is a part of my radius.log file: Wed Jun 11 11:14:36 2014 : Auth: Login OK: [Mark/<via Auth-Type = EAP>] (from client private-network-1 port 0 via TLS tunnel) Wed Jun 11 11:14:36 2014 : Auth: Login OK: [Mark/<via Auth-Type = EAP>] (from client private-network-1 port 5 cli F0-4D-A2-B2-34-16) Wed Jun 11 11:20:57 2014 : Auth: Login OK: [Mike/<via Auth-Type = EAP>] (from client private-network-1 port 0 via TLS tunnel) Wed Jun 11 11:20:57 2014 : Auth: Login OK: [Mike/<via Auth-Type = EAP>] (from client private-network-1 port 11 cli 00-26-38-C0-BA-37) as we see above radius logs the login actions, but when a user logout, radius doesn't log anything Can we make radius logs the logout actions too,what the configurations should I change to do this?
On 18 Jul 2014, at 22:56, Mark jensen <ngiw2012@hotmail.com> wrote:
freeRADIUS version is 1.0.4, and we use IEEE802.1X to authenticate users
This is a part of my radius.log file:
Wed Jun 11 11:14:36 2014 : Auth: Login OK: [Mark/<via Auth-Type = EAP>] (from client private-network-1 port 0 via TLS tunnel) Wed Jun 11 11:14:36 2014 : Auth: Login OK: [Mark/<via Auth-Type = EAP>] (from client private-network-1 port 5 cli F0-4D-A2-B2-34-16) Wed Jun 11 11:20:57 2014 : Auth: Login OK: [Mike/<via Auth-Type = EAP>] (from client private-network-1 port 0 via TLS tunnel) Wed Jun 11 11:20:57 2014 : Auth: Login OK: [Mike/<via Auth-Type = EAP>] (from client private-network-1 port 11 cli 00-26-38-C0-BA-37)
as we see above radius logs the login actions, but when a user logout, radius doesn't log anything
Can we make radius logs the logout actions too,what the configurations should I change to do this?
You'd use the accounting stop messages and the linelog module. I don't think it'd be possible in 1.0.4 as it lacks unlang (the policy language). Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Mark jensen wrote:
freeRADIUS version is 1.0.4
Upgrade.
as we see above radius logs the login actions, but when a user logout, radius doesn't log anything
Because FreeRADIUS doesn't know when the user logs out. The NAS has to tell it. And it appears that the NAS isn't telling FreeRADIUS.
Can we make radius logs the logout actions too,what the configurations should I change to do this?
Fix the NAS to send accounting packets. Alan DeKok.
participants (3)
-
Alan DeKok -
Arran Cudbard-Bell -
Mark jensen